$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34898dc-6446-3f70-a265-2cd7cb21a2e4.roa File: b34898dc-6446-3f70-a265-2cd7cb21a2e4.roa (raw, json) Hash identifier: Vjf5jlAwt7yUe5ourOQjwIrbo/N3QqrBcMOpMWy4Ci8= Subject key identifier: 01:8E:1F:16:C4:21:CA:22:47:42:FA:FA:18:0B:C6:AB:E9:6E:DE:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF2341B1151FD1096C9900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34898dc-6446-3f70-a265-2cd7cb21a2e4.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 25019 IP address blocks: 2600:1416:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:23:41:b1:15:1f:d1:09:6c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=8ecd6823-36f1-459a-b8bc-ff3a7779e325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:bc:9c:67:5f:3d:e4:ce:53:30:45:f7:e7: 3d:5f:48:30:4a:d2:9d:cb:e0:24:15:ff:32:e0:89: 92:e7:32:a2:32:0c:23:7e:81:be:84:c2:c5:15:cd: 8b:21:3c:d7:3a:62:71:7d:da:2e:49:76:38:07:94: 17:85:8c:20:13:1f:94:0d:49:74:d2:d9:c3:c1:3e: 2f:43:51:0b:7a:5a:d2:8e:97:99:0f:19:db:13:ee: f3:24:3a:ea:47:02:4b:e5:c3:ec:5a:45:55:c0:ad: c0:e2:61:51:d8:1a:9b:2d:54:e4:82:5e:7d:67:5f: e0:27:8c:2b:6f:bb:8e:19:3d:b4:3d:ee:a9:ee:7f: 98:78:03:c9:6f:e2:8c:63:a6:8f:ee:87:23:b9:2c: 0d:62:21:ca:77:66:cc:b7:c4:6e:62:7d:cb:cd:a0: e9:08:4d:f9:ac:a2:32:bb:ef:0b:97:38:52:21:11: 34:67:fb:19:b1:3e:cf:9b:e6:03:3d:af:78:68:42: 0c:31:f3:eb:3d:70:9b:d4:61:32:ff:27:1d:fb:4b: 56:7b:0f:25:57:7a:e9:a9:fc:43:40:73:74:d0:cc: 52:ea:97:23:f1:cb:8f:94:8e:ba:60:ca:07:6e:60: 66:ce:cf:a5:29:ba:8e:00:aa:e4:eb:3a:6a:44:42: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:1F:16:C4:21:CA:22:47:42:FA:FA:18:0B:C6:AB:E9:6E:DE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34898dc-6446-3f70-a265-2cd7cb21a2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1416:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d1:8f:e8:70:4b:4a:78:1a:e2:49:e3:22:cd:dc:39:a8:09: 71:13:e7:34:3f:32:cc:f8:d2:74:6c:1d:9e:81:c6:da:10:d3: 01:1b:2a:9c:4d:db:f8:59:36:df:bd:0c:e0:5c:10:77:c1:fd: 2f:4c:14:73:9b:6f:13:35:0b:05:c4:61:cd:44:44:a5:82:94: e8:5b:98:bd:b1:c8:24:d6:88:ef:0e:16:c7:25:6c:48:91:fa: fb:79:fe:2f:0d:a7:94:ba:a2:7e:b3:54:d9:be:45:ac:6d:34: 4b:88:68:a0:31:9a:13:fd:3e:42:5c:a7:ad:4a:76:bd:41:07: 37:58:0d:ea:ce:f7:0e:d7:73:46:7f:09:e8:e4:15:7c:2f:1b: fe:4c:33:4e:78:ad:59:d4:e8:67:9f:bb:78:9c:c2:a6:a7:06: 86:3e:c3:5d:83:68:2f:23:51:36:50:76:6c:df:19:18:3d:26: 8f:b1:2d:89:65:2d:7c:5f:97:f5:bc:a8:66:e2:e2:ea:9a:ed: a3:61:55:bc:6f:ce:25:bd:06:e5:89:28:a0:7c:9c:74:51:48: 03:e2:be:42:a4:3a:78:27:f4:e1:6f:bb:b9:0d:65:3d:b3:fe: 39:5f:49:7e:cf:78:e9:e6:35:a7:f7:3a:f7:60:0a:fc:98:c8: 95:66:52:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yNBsRUf0QlsmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OGVjZDY4MjMtMzZmMS00NTlhLWI4YmMtZmYzYTc3NzllMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBy8nGdfPeTOUzBF9+c9X0gwStKdy+AkFf8y 4ImS5zKiMgwjfoG+hMLFFc2LITzXOmJxfdouSXY4B5QXhYwgEx+UDUl00tnDwT4v Q1ELelrSjpeZDxnbE+7zJDrqRwJL5cPsWkVVwK3A4mFR2BqbLVTkgl59Z1/gJ4wr b7uOGT20Pe6p7n+YeAPJb+KMY6aP7ocjuSwNYiHKd2bMt8RuYn3LzaDpCE35rKIy u+8LlzhSIRE0Z/sZsT7Pm+YDPa94aEIMMfPrPXCb1GEy/ycd+0tWew8lV3rpqfxD QHN00MxS6pcj8cuPlI66YMoHbmBmzs+lKbqOAKrk6zpqREKSXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGOHxbEIcoiR0L6+hgLxqvpbt7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjM0ODk4ZGMtNjQ0Ni0z ZjcwLWEyNjUtMmNkN2NiMjFhMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHRj+hwS0p4GuJJ4yLN3DmoCXET5zQ/Msz40nRsHZ6BxtoQ0wEb KpxN2/hZNt+9DOBcEHfB/S9MFHObbxM1CwXEYc1ERKWClOhbmL2xyCTWiO8OFscl bEiR+vt5/i8Np5S6on6zVNm+RaxtNEuIaKAxmhP9PkJcp61Kdr1BBzdYDerO9w7X c0Z/CejkFXwvG/5MM054rVnU6Gefu3icwqanBoY+w12DaC8jUTZQdmzfGRg9Jo+x LYllLXxfl/W8qGbi4uqa7aNhVbxvziW9BuWJKKB8nHRRSAPivkKkOngn9OFvu7kN ZT2z/jlfSX7PeOnmNaf3OvdgCvyYyJVmUm8= -----END CERTIFICATE-----Generated at Mon Apr 28 00:34:02 2025 by rpki-client